[33869] in bugtraq
fix for recently disclosed Oracle interval conversion
daemon@ATHENA.MIT.EDU (Marc Bejarano)
Fri Feb 20 13:02:26 2004
Message-Id: <6.0.3.0.2.20040220133416.0288e640@127.0.0.1>
Date: Fri, 20 Feb 2004 13:42:56 -0400
To: bugtraq@securityfocus.com
From: Marc Bejarano <bugtraq@beej.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
on 2/5, cesar cerrudo sent an advisory about some buffer overflows in
interval conversion funcions in Oracle Database 9ir2 to the ntbugtraq
mailing list [1].
the advisory says:
==
Vendor Fix:
Go to Oracle Metalink site,
<http://metalink.oracle.com>http://metalink.oracle.com
Vendor Contact:
Oracle was contacted and they released a fix without telling me nor the
public anything and without issuing an alert
==
i went to metalink to look for a fix, but it was anything but obvious which
patch contains the fix.
anybody know which one does?
marc
[1] http://cert.uni-stuttgart.de/archive/ntbugtraq/2004/02/msg00015.html
